Re: [[cobalt-users] Server Hacked?]

["Richard E. Perlotto II" <richard@xxxxxxxxxxxx>]

You can use the product called 'Crack' to test all of your user accounts and 
passwords.  This is the same tool that most 'hackers' will be using.  You could
also replace your passwd program with one that restricts the type of passwords
that a user can select.  A good one is 'npasswd'.

You can find Crack at:

http://ciac.llnl.gov/ciac/ToolsUnixAuth.html#Crack

And npasswd at:

http://ciac.llnl.gov/ciac/ToolsUnixAuth.html#Npasswd



Richard

manitu wrote:
> 
> Hello all,
> 
> is there a way to scan the shadow file if there are username and passwords
> that are "almost" the same ?
> 
> Manuel
> 
> -----Ursprüngliche Nachricht-----
> Von: Tony <isplists@xxxxxxxxxxxx>
> An: <cobalt-users@xxxxxxxxxxxxxxx>
> Gesendet: Sonntag, 13. Februar 2000 18:21
> Betreff: RE: [[cobalt-users] Server Hacked?]
> 
> > True, I was thinking of one my 40-watt users who created a user called
> > 'mother' and made the password 'mom'.
> >
> > -----Original Message-----
> > From: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Dan
> > Sent: Sunday, February 13, 2000 10:53 AM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [[cobalt-users] Server Hacked?]
> >
> >
> > > Perhaps
> > > a user called joe with a password of joe. Once a hacker finds
> > > something like
> > > that he's
> > > in your machine and the rest is simple. Make your users choose strong
> > > passwords.
> > >
> > Fortunately the GUI on the RAQ2 won't let you have the same user name and
> > password.
> >
> > --
> > Dan Kriwitsky
> > 
> >
> >
> > _______________________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> >
> > _______________________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users

begin:vcard 
n:Perlotto;Richard
x-mozilla-html:FALSE
url:http://www.perlotto.com
org:Home
adr:;;;;;;
version:2.1
email;internet:richard@xxxxxxxxxxxx
x-mozilla-cpt:;-1
fn:Richard Perlotto
end:vcard